Skip Local User Account during PreStage Enrollment not working.

[sardesm]

This used to work and it is all of the sudden not working, preference is, to create the admin account in the Pre Stage and then skip local account and when prompted by a login screen be able to login as the AD user. As stated this was working, however it now is prompting to create the local user. Ideas?

[sardesm]

Running Jamf Pro 10.20.1, OS X Devices 10.15

[gburgess]

Now that we are ramping up for summer work and provisioning new machines, we are seeing this issue as well. Were you able to resolve this issue @sardesm , or still seeing this happening?

[emilh]

We're seeing this as well now, started right when 10.15.7 dropped. Have you been able to crack this one @sardesm, @gburgess ?

[craigo]

Started seeing this after 10.15.7 release as well

[henrikengstrom]

We have been seeing this since december 2020. It happens on 2 of 3 machines. Macs often needs to be reinstalled multiple times before enrolment success.

We have a support case at Jamf regarding this – so far without any success.

Our setup
- Jamf Pro 10.26.0
- Skipping Account Creation in PreStage.
- PreStage PKG installing Jamf Connect (tested with 2.0.2. and 2.1.2)
- After "Remote Management"-screen, "Create a Computer Account"-screen is shown.

Have an ongoing case with Jamf Support.

So far, we have tested
- Updated DEP token
- Updated APNS certificate
- Create a new PreStage (not cloned an old one)
- Installing Jamf Connect as PKG, and via postinstall script written by Sean Rabbitt: https://github.com/sean-rabbitt/jamf-connect-installer-package/blob/master/postinstaller.sh
- Jamf Cloud Team has had our Jamf Pro instance in Debug mode, without finding anything leading to a solution
-- Logs showed activation errors. Jamf provided us with a new Activation Key – without any success resolving the issue
- Verbose logs from our Jamf Pro server has not provided us with any solution

Has anyone been successful in finding a root cause?

ADE enrolment

Create a Computer Account is shown.

PreStage containing Skip Account Creation

[bouvet]

Does anyone have any news on this? We just started experience this on new macs that arrive. It was probably a year since we saw this last time.

[emilh]

No news. Still seeing it. New PreStage Enrollment profiles don't help. PreStage Enrollment profiles void of Configurations Profiles as has been suggested in other thread doesn't work either.

[BB_jamf]

Also seeing this as of late

[jbhojwani]

Chiming in that we are seeing this with our Pre-Stage as well, with similar options selected. I also checked our certificates and sync times from ABM to our PreStage and they seem to be fine as well.

Sometimes what helps this issue is unassigning/reassigning the machine to the PreStage and then doing a wipe/re-image on the Mac. But it appears even that is failing us lately.

[jason_hernandez]

Seeing this as well. So far it seems limited to one specific PreStage for our M1 Mac testing.

[abfajerman]

Seeing this as well in an environment I manage. SSO works otherwise but we never see the SSO authentication appear at all in the Remote Management window; it just skips right to the Create a Computer Account screen. I would try to deploy Jamf Connect with the login window settings but that's a whole other ball of nightmares with Big Sur and I was hoping that this approach was going to be easier to implement.

[user-LYBGeLSLLt]

we stilll have the problem, does anybody has an idea? 

[jbhojwani]

We had 2 problems in our environment. Once we solved those problems, the enrollments worked perfectly.

1. Our UIE management account and the local administrator account deployment through the Prestage were the same. We changed the local admin account to a new one (and of course randomized the pwd for the old admin account/current UIE account).
2. We had to untick some boxes in our Prestage for skipping OOBE screens. I don't remember which of them we unticked unfortunately.

After doing the above changes, our deployments go through every time without issues.

[EUC-Admin]

This is still occurring and pretty huge of an issue given the Volume Ownership with M1 requirements. We are a Jamf Pro shop and a Jamf Connect shop and they recommend us not to have a local account be created to assign volume ownership. Seems like a huge impact to Zero touch deployments. With intel chips no issue but M1 a huge one.